VYPR

Classified Listing Mobile Number Verification

by WordPress

CVEs (1)

  • CVE-2026-15985HigAug 26, 2026
    risk 0.53cvss 8.1epss

    The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the process_otp_login() function. This makes it possible for…